URLhaus Database

You are currently viewing the URLhaus database entry for http://45.202.35.36/sh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3133778
URL: http://45.202.35.36/sh4
URL Status:Offline
Host: 45.202.35.36
Date added:2024-08-29 04:43:05 UTC
Last online:2024-09-09 18:XX:XX UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2024-08-29 04:44:07 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:11 days, 13 hours, 41 minutes Bad (down since 2024-09-09 18:26:06 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-09-09n/aelf 513203dbc18eb4a54aba6dd49c7cc17a2582b2914920f2f60a4c5c05f9eb1269n/a 
2024-09-08n/aelf 8de29b1ed78ddca3d2e41380065d3086b7c8314293339dfa2c0de96fb7cf3133n/a 
2024-09-08n/aelf 2a45ae426af6877473a1ad2b6d163bf9a1f147664ef8a2c797c69d45cb1cd038n/a 
2024-09-07n/aelf 0bed9310148e450ba6eb9905710b8a07ebc8a9d041179ba9808c5fd5f93667fbn/a 
2024-09-01n/aelf 0a410139c43239babd76455cc7943fae0e19240096d862348bfa2a99ddb0539en/a 
2024-08-29n/aelf fdd3b64ea312687b106ed54542d165ea3115850f0336b9d2f068c8ecdad00348Virustotal results 67.16%Mirai